name: tracetcp
description: monitor connect, accept and close events of TCP connections
tracers:
  tracetcp:
    mapName: events
    structName: event
structs:
  event:
    fields:
    - name: timestamp
      attributes:
        template: timestamp
    - name: pid
      attributes:
        template: pid
    - name: task
      attributes:
        template: comm
    - name: uid
      attributes:
        template: uid
    - name: gid
      attributes:
        template: uid
    - name: src
      attributes:
        minWidth: 24
        maxWidth: 50
    - name: dst
      attributes:
        minWidth: 24
        maxWidth: 50
    - name: mntns_id
      description: Mount namespace inode id
      attributes:
        template: ns
    - name: netns
      description: Network namespace inode id
      attributes:
        template: ns
    - name: type
      description: Type of TCP connection event
      attributes:
        width: 16
        alignment: left
        ellipsis: end
ebpfParams:
  filter_pid:
    key: pid
    defaultValue: ""
    description: Show only events generated by processes with this pid
  filter_uid:
    key: uid
    defaultValue: ""
    description: Show only events generated by processes with this uid
